DevSecOps / Platform Engineer

Peregrine Advisors is hiring a DevSecOps / Platform Engineer to own delivery pipelines, automation, and environments for federal systems. The role builds and maintains secure AWS infrastructure, CI/CD pipelines, Linux images, and deployment processes, with occasional travel to the Washington, DC area.

Responsibilities:

• Work on the integration and deployment of enterprise tools and platforms such as SageMaker, Posit Connect, or on-demand, pre-configured EC2-based Linux virtual machines
• Build and maintain CI/CD pipelines for infrastructure validation, testing, deployment, and release promotion
• Configure cloud networking, access permissions, storage, and compute resources following established security requirements
• Build and maintain Linux machine images, including software installation, configuration, patching, and validation
• Support analytics and development environments, including user onboarding, access configuration, and software dependencies
• Troubleshoot deployment failures, connectivity problems, permissions, Linux services, and application runtime issues using logs and diagnostic tools
• Write and maintain scripts that simplify recurring operational tasks and improve consistency
• Participate in code reviews, test infrastructure changes, and document implementation details, troubleshooting procedures, and operational runbooks
• Take ownership of assigned changes from implementation through deployment verification, collaborating with senior engineers on architectural decisions and complex incidents

Requirements:

• The initial engagement requires United States citizenship and the ability to obtain a Public Trust determination
• 5+ years of DevSecOps or platform engineering experience
• A bachelor's degree in computer science, information technology, cybersecurity, engineering, or a related technical discipline
• Hands-on experience administering Amazon Web Services (AWS) cloud infrastructure with a working understanding of compute, storage, networking, and identity management
• Practical experience with infrastructure as code (CloudFormation or the AWS Cloud Development Kit), CI/CD pipeline automation with security gates using GitHub Actions or comparable tools, and hands-on Docker image creation and containerization
• Linux administration and troubleshooting skills, including packages, services, permissions, and logs
• Ability to write and troubleshoot scripts in Python and Bash
• Understanding of least-privilege access, zero trust principles, secure configuration, and controlled deployment processes
• Experience with Git-based version control
• Monitoring and logging
• Proficiency in writing, PowerPoint, and Excel
• Hands-on ownership of infrastructure as code and CI/CD pipelines in AWS environments, together with the knowledge to build and maintain Linux machine images and navigate the intricacies of enterprise tool integrations and deployment
• Python scripting beyond pipeline configuration, with Bash alongside it, so you can automate the work the tools do not cover
• A working command of cloud networking, access permissions, storage, and compute resources to deliver optimal functionality on budget and in line with security requirements
• Judgment suited to building where security and auditability are not optional
• You adapt your development workflow as AI tools evolve, using them to help implement, test, and improve the components you own
• You give the tools clear context, review and test their output, and remain accountable for the code you deliver
• The technical assessment is a Python coding exercise
• Federal security experience supporting Federal Information Security Modernization Act (FISMA) compliance, implementing National Institute of Standards and Technology Special Publication 800-53 (NIST SP 800-53) controls, and providing Authority to Operate (ATO) support
• Red Hat Enterprise Linux (RHEL) administration, Ansible, and software packaging experience
• An Amazon Web Services certification
• Nexus, Artifactory, CloudBolt, or comparable artifact management and provisioning platforms
• OpenID Connect (OIDC) authentication, deployment approval controls, and AWS environments spanning multiple accounts
• Federal information technology experience